cwe-94
Safeguard articles tagged "cwe-94" — guides, analysis, and best practices for software supply chain and application security.
73 articles
CVE-2012-0158: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
CVE-2012-0158 affects Microsoft MSCOMCTL.OCX and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2019-4716: IBM Planning Analytics Remote Code Execution Vulnerability
CVE-2019-4716 affects IBM Planning Analytics and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2019-0193: Apache Solr DataImportHandler Code Injection Vulnerability
CVE-2019-0193 affects Apache Solr and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-12-10.
CVE-2019-7609: Kibana Arbitrary Code Execution
CVE-2019-7609 affects Elastic Kibana and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-10.
CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVE-2015-7450 affects IBM WebSphere Application Server and Server Hypervisor Edition and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-10.
CVE-2019-16759: vBulletin PHP Module Remote Code Execution Vulnerability
CVE-2019-16759 affects vBulletin vBulletin and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2019-9082: ThinkPHP Remote Code Execution Vulnerability
CVE-2019-9082 affects ThinkPHP ThinkPHP and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-22894: Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
CVE-2021-22894 affects Ivanti Pulse Connect Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-22900: Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
CVE-2021-22900 affects Ivanti Pulse Connect Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-8243: Ivanti Pulse Connect Secure Code Execution Vulnerability
CVE-2020-8243 affects Ivanti Pulse Connect Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-8644: PlaySMS Server-Side Template Injection Vulnerability
CVE-2020-8644 affects PlaySMS PlaySMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2015-1635: Microsoft HTTP.sys Remote Code Execution Vulnerability
CVE-2015-1635 affects Microsoft HTTP.sys and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-02-10.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.